Avaya Cybersecurity / Vulnerability Assurance Specialist

Job Title: Avaya Cybersecurity / Vulnerability Assurance Specialist

Duration: 3-5 years (open to conversion after 6-12 months)

Location: Open nationwide, with preference for candidates in VA, MD, or CO.

Travel: Bi-weekly travel. Approximately 50%, following a rotating schedule:

- Week 1: Onsite in Springfield, VA.

- Week 2: Remote.

- Week 3: Onsite in Bethesda, MD, or Colorado Springs, CO.

- Week 4: Remote.

- Expenses: All required travel and lodging expenses are covered.

Position Overview:

·         We are seeking an experienced Avaya Cybersecurity / Vulnerability Assurance Specialist with a strong understanding of the Avaya Aura ecosystem and hands-on experience securing, hardening, assessing, and remediating Avaya environments.

·         This is not a general cybersecurity position. The ideal candidate will have a solid technical background within Avaya Aura and will specialize in vulnerability assurance, security hardening, vulnerability remediation, STIG compliance, security patching, scan analysis, and POA&M management.

·         The consultant must be comfortable working directly within enterprise Avaya environments and traveling approximately 50% of the time, generally following a one week onsite / one-week remote schedule.

Key Responsibilities:

·         Perform vulnerability assessments and security reviews across Avaya Aura environments.

·         Review and remediate findings from vulnerability and security scan reports.

·         Implement and validate STIGs (Security Technical Implementation Guides) and security-hardening requirements.

·         Support MUDG/security-hardening activities within Avaya environments.

·         Evaluate, test, coordinate, and deploy Avaya Security Service Packs and security patches

·         Identify vulnerabilities affecting Avaya infrastructure and develop appropriate remediation plans.

·         Create, maintain, and close out POA&Ms (Plans of Action & Milestones).

·         Document security findings, remediation activities, exceptions, and residual risks.

·         Work with cybersecurity, infrastructure, network, and unified communications teams to resolve vulnerabilities.

·         Validate systems following remediation to ensure security requirements are satisfied without negatively impacting the Avaya environment.

·         Support onsite security assessments, remediation efforts, upgrades, and compliance initiatives.

Required Experience:

·         Strong hands-on experience with Avaya Aura applications and architecture.

·         Experience working with core Avaya technologies such as:

•       Avaya Aura Communication Manager.

•       System Manager.

•       Session Manager.

•       Avaya Session Border Controller / ClientE.

•       Other supporting Aura applications and infrastructure.

·         Strong experience with Avaya vulnerability management and security hardening.

·         Experience reviewing and addressing vulnerability scan reports.

·         Working knowledge of STIGs, POA&Ms, security patches/service packs, and remediation processes.

·         Ability to understand security findings and determine their potential impact on an Avaya environment.

·         Strong troubleshooting and documentation skills.

·         Ability and willingness to travel approximately 50% – typically one week onsite followed by one week remote.

Preferred Qualifications:

·         CompTIA Security+ certification is preferred but not required.

·         Experience supporting Avaya environments within DoD, federal government, defense contractor, or other highly regulated environments.

·         Familiarity with DISA security and compliance requirements.

·         Experience working with enterprise vulnerability scanning and security tools.

·         Previous experience supporting formal security audits, assessments, or vulnerability remediation programs.